What’s a “Zero-Day” Attack? A Diagram of the Vulnerability Timeline?

A zero-day attack happens when someone uses a secret weakness in something before anyone knows it exists.

Imagine your toy box has a hidden door that only you know about, and you use it to sneak in extra toys without your brother noticing. That’s like a zero-day attack: the attacker finds a secret weakness (the hidden door) in software or hardware, and uses it right away before anyone else knows it's there.

1. The secret weakness is already there, like a tiny crack in the toy box you didn’t tell anyone about.
2. Someone finds out about the crack, maybe by looking closely at how the toys are arranged.
3. Before the people who made the toy box know about the crack, the attacker uses it to get more toys (or cause trouble).
4. Only later do the makers find out, and then they fix the crack.

It’s like sneaking in extra toys before your brother even knows there's a secret door!